Security Advisory

CVE-2026-33006

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-04 14:42:03

Last updated 2026-05-04 18:23:55

Assigner apache

CVSS score not scored

State PUBLISHED

Description

A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this issue.

← Browse all CVEs View on cve.org ↗